{"report_id":"fb0cb18d-1896-460b-9f96-7d405c974754","version":6,"status":"done","tags":[],"date":"2026-04-14T13:31:37Z","url":{"schema":"http","addr":"trezorsafe7.io","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":0,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"trezorsafe7.io/","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"title":"Trezor Safe","dom":{"size":69337,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49576)","md5":"0e9ab7cb37ceddd1d2bf93dd915d8508","sha1":"fa14ec85b084bdfa36fc019cc6bbde907edd7b5c","sha256":"69957a8fc65374fb7091884196a747208de4ea62af5bd23a95eeb7aaac092e68","sha512":"22f4f65f51f75c3585f8d06cc21d49cd780aef8ce9d5b6f017def8ab070017111737abaea3e50f5fd0c5684188c62880d40302b90aa8334f6def1ea19e93d338","ssdeep":"1536:vXx/c64Jysq7vcjjjjwNtxJCBAPPPPvPPPPTXPPPPynPPPPz:vzxsByiz","tlshash":"52639638324c3e2d655b87a4f7e4b7685228e590f96b84a9f2bc047353c3dc8a9376d4","dom_hash":"domhash155af9349cbf577252db691a44cf4f8c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trezorsafe7.io","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":0,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T13:31:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"trezorsafe7.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trezorsafe7.io","ip":{"addr":"185.100.87.82","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-04-14T13:31:38.933871Z","last_seen":"2026-04-14T13:31:38.933871Z","alert_count":12,"request_count":4,"received_data":997928,"sent_data":1781,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trezorsafe7.io/assets/index-CcgbMBsr.js","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"82b464faf00fc9a5077012a3d6243878","sha1":"a4c8dc3ed9b7f22fc5e9acfd1fd2100b2b196cc0","sha256":"2a92744eca4b9f0c2551fa0c9c8ba9ce619f118f20d1436085bfbb8c82d32423","sha512":"35a9b2e516c6ca1c439f8c700b3e6f2f27e4fa0e86ec0d27d210508576f4721ac8ce41030d3e769cff9f639fdc9bf73511dea21b28445f5432e457238681da87","ssdeep":"12288:HumfY8ZAS2pgHVV9eTscD9fiioqKFR2O9zbrb8E9m4KAh71J:HJZf2Q9eTscpfiiobFR2O9HLHKAhJJ","tlshash":"91157c48b051be7debb705e5607f8016b12e1e94f81f88a0f0bc58772a64446b677bec","size":878835,"data":"","first_seen":"2026-04-14T13:31:41.931428Z","last_seen":"2026-04-14T13:33:43.679932Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"trezorsafe7.io/","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T13:31:16.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsafe7.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:54:45 GMT","end":"Sun, 24 May 2026 08:54:44 GMT"},"fingerprint":{"sha1":"D7:A6:27:FD:B0:DE:96:DB:74:4B:5C:C4:D0:AA:4E:B1:BF:61:5E:DF","sha256":"C1:D0:78:BB:8B:03:9D:3C:EF:43:45:25:13:52:8E:8E:9B:7D:D5:92:42:1F:A2:14:23:1E:D8:B4:CE:D6:52:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trezorsafe7.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Apr 2026 13:31:15 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 14 Apr 2026 12:56:30 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=0\r\nExpires: Tue, 14 Apr 2026 13:31:15 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Length: 510\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1358,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ddd0157f6e920e06a8b7c023d3127cd9","sha1":"b78acf0ffe1730b26f8ef50c82b629f7090f532f","sha256":"3810cb469c093e77cdae601e74ce7f6dd78e79a31f68a06dd27510ad7256c5da","sha512":"416202609bbce68e238378fac89a64a4ba1edc13502b0daf0a02d795a071a2a50dc281f85d18f5c01803bf36fb7c6af38e473db6d5345cf006558dd0627285b1","ssdeep":"","tlshash":"e921be134bb4ad1563a181342ce6f089f652d24bd3989a9136ec515e0fc5fcbc5fb3a4","first_seen":"2026-04-14T13:31:41.929274Z","last_seen":"2026-04-14T13:33:43.695805Z","times_seen":2,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":247,"dns":118,"connect":60,"send":0,"wait":63,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"trezorsafe7.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsafe7.io/assets/index-CcgbMBsr.js","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trezorsafe7.io/","date":"2026-04-14T13:31:16.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsafe7.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:54:45 GMT","end":"Sun, 24 May 2026 08:54:44 GMT"},"fingerprint":{"sha1":"D7:A6:27:FD:B0:DE:96:DB:74:4B:5C:C4:D0:AA:4E:B1:BF:61:5E:DF","sha256":"C1:D0:78:BB:8B:03:9D:3C:EF:43:45:25:13:52:8E:8E:9B:7D:D5:92:42:1F:A2:14:23:1E:D8:B4:CE:D6:52:83"}}},"request":{"raw":"GET /assets/index-CcgbMBsr.js HTTP/1.1\r\nHost: trezorsafe7.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trezorsafe7.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Apr 2026 13:31:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 14 Apr 2026 12:56:30 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":878835,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"82b464faf00fc9a5077012a3d6243878","sha1":"a4c8dc3ed9b7f22fc5e9acfd1fd2100b2b196cc0","sha256":"2a92744eca4b9f0c2551fa0c9c8ba9ce619f118f20d1436085bfbb8c82d32423","sha512":"35a9b2e516c6ca1c439f8c700b3e6f2f27e4fa0e86ec0d27d210508576f4721ac8ce41030d3e769cff9f639fdc9bf73511dea21b28445f5432e457238681da87","ssdeep":"12288:HumfY8ZAS2pgHVV9eTscD9fiioqKFR2O9zbrb8E9m4KAh71J:HJZf2Q9eTscpfiiobFR2O9HLHKAhJJ","tlshash":"91157c48b051be7debb705e5607f8016b12e1e94f81f88a0f0bc58772a64446b677bec","first_seen":"2026-04-14T13:31:41.931428Z","last_seen":"2026-04-14T13:33:43.679932Z","times_seen":2,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"trezorsafe7.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsafe7.io/assets/index-DByD98Tv.css","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trezorsafe7.io/","date":"2026-04-14T13:31:16.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsafe7.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:54:45 GMT","end":"Sun, 24 May 2026 08:54:44 GMT"},"fingerprint":{"sha1":"D7:A6:27:FD:B0:DE:96:DB:74:4B:5C:C4:D0:AA:4E:B1:BF:61:5E:DF","sha256":"C1:D0:78:BB:8B:03:9D:3C:EF:43:45:25:13:52:8E:8E:9B:7D:D5:92:42:1F:A2:14:23:1E:D8:B4:CE:D6:52:83"}}},"request":{"raw":"GET /assets/index-DByD98Tv.css HTTP/1.1\r\nHost: trezorsafe7.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trezorsafe7.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Apr 2026 13:31:16 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 14 Apr 2026 12:56:30 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\nExpires: Thu, 14 May 2026 13:31:16 GMT\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Length: 16541\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":107216,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"43874d24a9c5221bfbd262edc641e12c","sha1":"1e452f50891d1fe2dd64f3cc38f62c33d825d45a","sha256":"6927f38406e6013cfa3dbb3c08a12a3f2e3505782d23a1973985cb926099c459","sha512":"e159ca7a77980c8be7ce6b67bcb78fbf976b1366c9c9f0c0a08ce76a5bd2f3fc7f7ea2ead95901b8e4beb20c3c16772061a5729964869e9720c47c8200dc2a68","ssdeep":"3072:FSAh0WLkzwzochLcQAk2IgaDMUlJaGhCr378VQZkt5FfOC:FSAh0WLkzwzochLcQAk2IgOCr378VQZm","tlshash":"bba36569a5a8707f7c17f1e4c3cc75aca51af1d4ce3a02b5a9c942243bf27f6486ac44","first_seen":"2026-04-14T13:31:41.93379Z","last_seen":"2026-04-14T13:33:43.682027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":100,"dns":1,"connect":48,"send":0,"wait":50,"receive":43,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"trezorsafe7.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trezorsafe7.io/favicon.ico","fqdn":"trezorsafe7.io","domain":"trezorsafe7.io","tld":"io"},"ip":{"addr":"185.100.87.82","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trezorsafe7.io/","date":"2026-04-14T13:31:17.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trezorsafe7.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:54:45 GMT","end":"Sun, 24 May 2026 08:54:44 GMT"},"fingerprint":{"sha1":"D7:A6:27:FD:B0:DE:96:DB:74:4B:5C:C4:D0:AA:4E:B1:BF:61:5E:DF","sha256":"C1:D0:78:BB:8B:03:9D:3C:EF:43:45:25:13:52:8E:8E:9B:7D:D5:92:42:1F:A2:14:23:1E:D8:B4:CE:D6:52:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trezorsafe7.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trezorsafe7.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Apr 2026 13:31:16 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 09 Apr 2026 18:55:46 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8676\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8676,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"777469bf4b75eb960187631af82cf223","sha1":"e35c5ddaab40304dd40cbcc3b1d319a136a2c977","sha256":"e5de2b345505cfd548109b1b1b9bd09e6c8ccc585200e0cd41e66fd667783d12","sha512":"c20f2ce4bcac2309114d9dc9d0db48b241d36f699b3e5d08a4cdb835356b5b5e6b688754463fd84df6c2a545bd8926c8691606cf27551d1ec2b9af330e5e6ce3","ssdeep":"192:WJVBqYt+84pzkELZi/88ysJgUt6m37f6+mSJ:6VD1cQELZi/8XsWQfsSJ","tlshash":"9e028ef5e34abc8ab4e0f676c06e866690dcbec31b4360911a2cec6197790508ed1d9d","first_seen":"2026-04-14T13:31:41.938097Z","last_seen":"2026-04-14T13:33:43.690738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"trezorsafe7.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"trezorsafe7.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}